Difference between pages "Disk image" and "Scalpelcp"

(New page: Creating a disk image is important in forensics prior to analyzing anything in order to ensure that disk information is not inadvertantly changed during analysis. By performing an origina...)

(New page: ScalpelCp is a simple perl script that processes the logfile of scalpel run in preview mode on a CarvPath file and populates the output directory with symbolic links to CarvFs Carv...)

Line 1:

Line 1:

−

Creating a disk image is important in forensics prior to analyzing anything in order to ensure that disk information is not inadvertantly changed during analysis. By performing an original disk image and storing the original disk, it is possible to reproduce forensic test results with an exact reproduction of analysis methods.

+

ScalpelCp is a simple perl script that processes the logfile of [[scalpel]] run in preview mode on a CarvPath file and populates

+

the output directory with symbolic links to [[CarvFs]] CarvPaths.

Revision as of 18:52, 12 December 2008

ScalpelCp is a simple perl script that processes the logfile of scalpel run in preview mode on a CarvPath file and populates
the output directory with symbolic links to CarvFs CarvPaths.